Azure VM RDP with signed/trusted certificates

Question

Hi,

I am deploying virtual machines to Azure. Now, in my understanding, one of the best ways of securing your RDP against MITM attacks is through certificates. The RDP connection of Azure VM's comes with a pre configured certificate, but I rather use my own signed certificates. This way the endusers in my company don't have to ignore the warning about the identity of the server.

So, I generated a Root cert, installed this and subsequently generated a server certificate. I am at a loss however how to get the VM to use this server certificate.

Some help or pointers to documentation would be great.

Can it be done?

Answer 1

in the end i fixed it this way:
https://www.vultr.com/docs/how-to-configure-a-lets-encrypt-tls-certificate-for-windows-remote-desktop

I wasn't willing to set up the OSCP part of the certification process for my local CA.

Answer 2

This did help:
https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/remote-desktop-listener-certificate-configurations

But now i need to configure te OCSP...